ansible-collections / netapp.ontap

Ansible collection to support NetApp ONTAP configuration.
https://galaxy.ansible.com/netapp/ontap
GNU General Public License v3.0
51 stars 34 forks source link

Unknown CA error however CA is installed and valid on the cluster #128

Closed edd1619 closed 1 year ago

edd1619 commented 1 year ago

Hello,

We are receiving the following error running a playbook, however the CA is confirmed installed and valid on the cluster.

NetApp API failed. Reason - URL error:URLError(SSLError(1, '[SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1131)'))"

Any help to why this error occurs with valid cert?

Thanks!

Also to note, the PEM/KEY files have been confirmed as accurate in the project, and is synced with AWX.

lonico commented 1 year ago

These issues are better discussed on Discord: https://discord.gg/netapp

Could you try to run the following playbook with -vvv and provide the output https://github.com/ansible-collections/netapp.ontap/blob/main/playbooks/examples/support/debug_connectivity.yaml

You could run first as is, and a second time with validate_certs set to true.

edd1619 commented 1 year ago

Thanks. We cannot access Discord, blocked by company policy, however this issue is due to certificate chain issues which we are in process of fixing.